Generate Azure Policy compliance report with resource list

Hi @Rakesh Singh

GoodDay!

After many attempts, I finally succeeded in adding the column Initiative Name.

It looks like I am the first to develop this kind of custom script for Azure Policies requirements. It was a really helpful and innovative approach that required thinking outside the box.

Please find the script and output below.

<#
.SYNOPSIS
    This script retrieves non-compliant resources from all Azure subscriptions.
.DESCRIPTION
    - Connects to Azure using Connect-AzAccount.
    - Retrieves a list of all Azure subscriptions.
    - Iterates through each subscription to fetch non-compliant resources.
    - Fetches associated policy details, including Policy Definition Name and Initiative Display Name.
    - Outputs results in a sorted format.
    - Saves the compliance report to a CSV file.
.NOTES
    - Requires Az PowerShell Module.
    - User must have appropriate permissions to retrieve policy compliance data.
#>
# Login with Connect-AzAccount if not using Cloud Shell
Connect-AzAccount
# Initialize an empty array for storing non-compliant resources
$vmArray = @()
# Get all Azure subscriptions
$azureSubscriptions = Get-AzSubscription
# Loop through each subscription
foreach ($subscription in $azureSubscriptions) {
    # Set the Azure context to the current subscription
    Set-AzContext -SubscriptionId $subscription.Id
    # Get non-compliant resources for the current subscription
    $nonCompliantResources = Get-AzPolicyState | Where-Object { $_.ComplianceState -eq "NonCompliant" }
    # Output the count of non-compliant resources for the current subscription
    Write-Host "Subscription: $($subscription.Name) - Non-Compliant Resources: $($nonCompliantResources.Count)"
    # Retrieve and process non-compliant resources
    foreach ($resource in $nonCompliantResources) {
        $resourceName = $resource.resourceId.Split('/')[-1]
        $resourceType = $resource.resourceType
        $complianceState = $resource.complianceState
        $resourceGroup = $resource.resourceGroup
        $resourceLocation = $resource.resourceLocation
        $policyDefinitionName = $resource.PolicyDefinitionReferenceId
        $PolicyAssignmentName = $resource.PolicyAssignmentName
        $InitiativeId = $resource.PolicySetDefinitionId  # Get Initiative ID
        $InitiativeName = $resource.PolicySetDefinitionName  # Short Initiative Name
        # Retrieve Initiative Display Name
        $InitiativeDisplayName = $null
        if ($InitiativeId) {
            $initiativeDetails = Get-AzPolicySetDefinition -Id $InitiativeId -ErrorAction SilentlyContinue
            if ($initiativeDetails) {
                $InitiativeDisplayName = $initiativeDetails.Properties.DisplayName
            }
        }
        # Store resource details in an object
        $vmArray += New-Object PSObject -Property @{
            PolicyDefinitionName  = $policyDefinitionName
            InitiativeDisplayName = $InitiativeDisplayName  # Adding the Display Name
            ComplianceState       = $complianceState
            SubscriptionName      = $subscription.Name
            ResourceGroup         = $resourceGroup
            ResourceName          = $resourceName
            ResourceType          = $resourceType
            ResourceLocation      = $resourceLocation
        }
    }
}
# Sort and Export the results to a CSV file
$vmArray | Sort-Object PolicyDefinitionName, InitiativeDisplayName, ComplianceState, SubscriptionName, ResourceGroup, ResourceName, ResourceType, ResourceLocation | Export-CSV -Path ".\compliance.csv" -NoTypeInformation
Write-Host "Compliance report exported to compliance.csv"

Please find the output:

Please do not forget to "Accept the answer” and upvote it wherever the information provided helps you, this can be beneficial to other community members.it would be greatly appreciated and helpful to others.